Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b8300db2-a352-4df9-97b2-ac33a5ae14d8/7b346895112f1f6b78d6148f33aa6564eab1c94b.roa
File:                     7b346895112f1f6b78d6148f33aa6564eab1c94b.roa (raw, json)
Hash identifier:          +JuAIP3O7Q5J30aSsopiq48BJJQjsHEzsXEjQtsf+ws=
Subject key identifier:   8A:06:8E:51:54:B1:50:77:0D:46:88:D7:72:8B:04:B9:5B:87:5E:BB
Certificate issuer:       /CN=0c4557be1a84f05a56a15cb22513acd961fb70fa
Certificate serial:       0EAF36
Authority key identifier: 6A:F8:BD:09:59:77:BC:67:70:C2:C2:34:20:F9:8A:39:EC:B6:12:16
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0c4557be1a84f05a56a15cb22513acd961fb70fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b8300db2-a352-4df9-97b2-ac33a5ae14d8/7b346895112f1f6b78d6148f33aa6564eab1c94b.roa
Signing time:             Tue 23 Nov 2021 14:10:18 +0000
ROA not before:           Tue 23 Nov 2021 03:00:00 +0000
ROA not after:            Thu 23 Nov 2023 03:00:00 +0000
asID:                     269936
IP address blocks:        190.83.104.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 962358 (0xeaf36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c4557be1a84f05a56a15cb22513acd961fb70fa
        Validity
            Not Before: Nov 23 03:00:00 2021 GMT
            Not After : Nov 23 03:00:00 2023 GMT
        Subject: CN=7b346895112f1f6b78d6148f33aa6564eab1c94b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:08:17:80:78:00:3e:e5:f0:cc:e6:e8:18:18:
                    b2:13:47:e3:80:9e:43:56:68:06:a9:93:58:61:9c:
                    f5:9f:d5:7c:25:6c:f7:a3:6e:67:12:a4:6b:05:45:
                    c5:03:6e:05:22:5f:8f:2f:9a:fd:ef:36:4c:d4:25:
                    0f:3f:f5:0f:61:63:2f:24:2a:9a:2b:a0:b7:c1:67:
                    68:9d:6c:88:15:b7:e5:98:56:6b:b0:e9:b0:18:64:
                    42:aa:8a:c9:09:ee:35:92:f7:da:97:43:a0:6f:e8:
                    b7:66:f1:fa:82:79:d4:93:58:ac:07:a7:40:2c:cd:
                    03:ad:6e:a8:f8:f7:81:e6:15:0e:9f:8c:dc:10:1e:
                    2c:90:fb:ea:9e:e2:1c:63:ce:45:86:b1:c1:fa:22:
                    3c:e4:81:2c:ee:91:f9:8f:2c:0c:e7:9b:1c:b8:60:
                    ed:07:e5:b8:42:8e:9a:75:20:62:90:a6:77:ca:39:
                    82:4c:c8:ce:b3:13:3f:95:93:03:6f:c2:ed:28:da:
                    02:49:48:29:41:18:d5:04:4c:97:c4:3c:1d:f5:48:
                    1e:b5:f6:fe:35:80:77:14:e2:9f:38:91:a8:1e:1d:
                    fb:bb:ca:f1:be:48:9f:2a:cc:ba:2b:ec:22:8a:69:
                    b2:53:f7:31:90:6d:e4:50:1c:c0:24:82:b3:ef:98:
                    d1:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:06:8E:51:54:B1:50:77:0D:46:88:D7:72:8B:04:B9:5B:87:5E:BB
            X509v3 Authority Key Identifier:
                keyid:6A:F8:BD:09:59:77:BC:67:70:C2:C2:34:20:F9:8A:39:EC:B6:12:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0c4557be1a84f05a56a15cb22513acd961fb70fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b8300db2-a352-4df9-97b2-ac33a5ae14d8/7b346895112f1f6b78d6148f33aa6564eab1c94b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b8300db2-a352-4df9-97b2-ac33a5ae14d8/0c4557be1a84f05a56a15cb22513acd961fb70fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:25:c8:1b:b8:fd:12:dd:ec:fe:5f:61:38:cc:b2:e3:12:f5:
         2b:cf:77:7e:d2:8f:91:4a:a4:52:6d:a9:00:97:02:e3:b8:ff:
         3d:fd:96:7e:0b:45:a8:66:e5:5f:51:9d:a1:4a:b0:c1:ad:d2:
         c2:83:13:1f:9b:c0:b6:3c:79:e2:df:eb:5f:28:ae:94:c7:36:
         ba:b6:7a:7d:ff:f3:d6:c3:aa:30:e9:d0:7d:b7:3b:77:61:99:
         69:40:e4:9e:9b:19:95:8d:9e:b7:fd:b2:32:41:c8:8d:92:70:
         5e:6c:1a:32:36:ac:6a:ad:8c:9a:4f:7d:a7:27:68:1a:6d:fb:
         ce:5d:1e:e6:e6:3b:60:b6:4f:e6:4a:b0:5b:12:b5:1d:2e:42:
         c9:92:05:77:e3:e5:55:27:94:82:72:83:4d:ba:e2:ca:38:82:
         39:2d:09:8f:a9:a4:30:91:0f:a5:9c:41:7f:bf:95:ff:e7:01:
         4c:f9:f9:7d:7a:41:92:86:81:ee:1a:e6:6f:1c:9b:19:ec:72:
         90:2e:38:96:ae:d8:e0:39:3b:ad:19:78:bd:a2:1b:5b:c2:80:
         6e:0b:53:cb:9d:08:c6:00:51:29:f7:1b:92:43:e1:b7:09:4b:
         68:25:00:08:30:5c:da:70:fc:39:03:26:39:9a:0e:7a:f2:49:
         9e:70:59:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 22 08:13:48 2023 by rpki-client on console-fra.rpki-client.org